$ rpki-client -vvf rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.mft File: xNT7D_AneW6dqhe3VVH9C3fxmC8.mft (raw, json) Hash identifier: 8q79UkNYsFdg1dNtoidLCPZACjK+nbFwq5qsCThbSvs= Subject key identifier: 68:E3:E6:E4:BC:A3:36:72:91:85:75:47:23:F0:6D:25:BC:AA:ED:B2 Authority key identifier: C4:D4:FB:0F:F0:27:79:6E:9D:AA:17:B7:55:51:FD:0B:77:F1:98:2F Certificate issuer: /CN=A916EB94/serialNumber=C4D4FB0FF027796E9DAA17B75551FD0B77F1982F Certificate serial: 0440 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNT7D_AneW6dqhe3VVH9C3fxmC8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.mft Manifest number: 041D Signing time: Sat 23 Aug 2025 00:39:16 +0000 Manifest this update: Sat 23 Aug 2025 00:39:16 +0000 Manifest next update: Sat 30 Aug 2025 00:39:16 +0000 Files and hashes: 1: xNT7D_AneW6dqhe3VVH9C3fxmC8.crl (hash: d1aVqbGAqpzNYEZ7MPH24y3ldFqfdnsniQPlyb4gxys=) 2: 07C047B28BE911EF9DF25F0BC4F9AE02.roa (hash: w8f9UqJ79XDQJmoeSep+AfxKgamdRq1+8fZXwOXv2As=) 3: 50F671067CC411EF8589DF32C4F9AE02.roa (hash: OIx3I5y70K4lhigPdUK9t3VwKVKzekhTxytvaT3fL4k=) 4: 51FE6D48D27011ECB30F1F0DC4F9AE02.roa (hash: tt0v+KBQPMpXrI1DE3BSU9iXmppEt61/W7+0e5BehNo=) 5: 66EDABB6815411EF98D05E1EC4F9AE02.roa (hash: SS7LsXp/x71VoteuW8pTuBwbWh8OyBISF5BhDwIPz/Q=) 6: D694BD82DBBA11EEB4125A3EC4F9AE02.roa (hash: +SD5oyeqwCVbJIR3Rca7WRwH9ic0DsTEAz6kXO4nmEw=) 7: 38D5F796961B11EC9851F811C4F9AE02.roa (hash: PcnJ0SQLHGsAHxXxj0qo8jDhyNqxoXVPvv8v+GYk0TQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.crl rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNT7D_AneW6dqhe3VVH9C3fxmC8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:39:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1088 (0x440) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916EB94, serialNumber=C4D4FB0FF027796E9DAA17B75551FD0B77F1982F Validity Not Before: Aug 23 00:39:16 2025 GMT Not After : Aug 30 00:39:16 2025 GMT Subject: CN=68a90db4-2443 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b4:4f:d0:5a:ce:23:2e:60:3b:bf:11:74:24: 6b:3f:93:92:f9:45:fc:48:2b:dc:28:bd:68:02:28: b7:4e:ac:65:64:2f:6c:7f:79:e9:af:aa:8d:2b:d2: 39:7f:9e:07:5d:ee:e2:d5:26:9e:c2:91:30:c5:91: 8f:09:8f:e8:f6:dc:12:56:fe:d0:c2:01:a5:21:0f: df:52:d5:46:1b:d1:a9:10:11:f2:be:a7:54:e6:7c: 44:e7:b8:c4:8d:52:df:f7:0f:d6:00:ab:01:34:a9: 27:e4:dd:a2:e3:da:97:6a:7f:d4:1a:44:8b:3e:b5: 9f:8a:bf:d5:6c:71:35:aa:5e:01:88:4b:c8:ed:19: bc:6c:ff:06:e9:ea:5e:c7:20:97:0a:fd:dd:4d:c0: 8e:5f:9e:9c:fa:63:6a:90:59:45:1a:a3:35:81:5a: e4:4d:be:bc:70:74:e6:ee:02:21:ae:af:d1:47:73: 91:02:37:22:4f:89:31:cf:69:6f:11:d2:70:a2:36: c8:30:70:b5:19:38:c8:4b:59:77:ed:d2:28:6c:ac: 9a:d9:f8:bf:1a:02:41:0c:c7:5d:ad:c6:de:a4:da: ff:41:dd:fa:1a:23:b1:4a:50:70:fe:2d:5f:e5:ee: 90:50:38:a7:47:9e:bf:14:30:f9:f1:3c:ff:dd:00: 71:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:E3:E6:E4:BC:A3:36:72:91:85:75:47:23:F0:6D:25:BC:AA:ED:B2 X509v3 Authority Key Identifier: keyid:C4:D4:FB:0F:F0:27:79:6E:9D:AA:17:B7:55:51:FD:0B:77:F1:98:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNT7D_AneW6dqhe3VVH9C3fxmC8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:94:af:f3:92:2f:67:c5:5f:46:90:cd:1d:49:9b:62:e1:aa: 65:76:97:20:0e:02:8c:c4:c1:49:13:51:9b:38:b3:d7:80:18: f1:74:ae:a0:cd:eb:da:4a:c3:bb:01:b1:a8:c5:81:de:8d:e4: ab:ef:ef:16:1e:0d:0d:8f:da:e2:c5:2d:22:9f:62:be:cb:a0: d5:da:9c:e0:1e:2a:17:75:8b:f2:ef:f5:27:92:54:18:13:1a: a8:39:ad:f5:67:ba:a5:c3:38:25:cd:99:4d:c3:4d:0e:e9:4b: 8e:2a:37:c5:71:2b:aa:2f:00:ad:b8:b3:61:de:d6:32:37:f2: dd:51:77:df:45:d3:b6:fc:27:2d:3d:29:b0:86:39:ed:66:4c: 71:94:b3:64:97:77:b5:6c:da:ce:0c:ab:41:af:95:fa:6d:65: 55:bc:4d:52:28:8e:c9:0c:18:4c:03:36:11:96:45:1f:ac:4e: df:2b:df:2d:26:80:87:62:ef:c2:37:89:f3:24:d9:3a:5c:b6: 02:d5:19:1e:4c:fb:21:c8:20:d3:77:03:63:00:26:bd:a9:ce: b3:3d:66:81:b9:41:52:b9:53:01:4a:70:9f:d2:0d:cd:57:19: ef:ef:f9:ba:ea:f9:ad:5a:09:da:ab:b1:d6:d2:e7:68:21:e2: 28:09:c6:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVCOTQxMTAvBgNVBAUTKEM0RDRGQjBGRjAyNzc5NkU5REFBMTdCNzU1NTFGRDBC NzdGMTk4MkYwHhcNMjUwODIzMDAzOTE2WhcNMjUwODMwMDAzOTE2WjAYMRYwFAYD VQQDEw02OGE5MGRiNC0yNDQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzbRP0FrOIy5gO78RdCRrP5OS+UX8SCvcKL1oAii3TqxlZC9sf3npr6qNK9I5 f54HXe7i1SaewpEwxZGPCY/o9twSVv7QwgGlIQ/fUtVGG9GpEBHyvqdU5nxE57jE jVLf9w/WAKsBNKkn5N2i49qXan/UGkSLPrWfir/VbHE1ql4BiEvI7Rm8bP8G6epe xyCXCv3dTcCOX56c+mNqkFlFGqM1gVrkTb68cHTm7gIhrq/RR3ORAjciT4kxz2lv EdJwojbIMHC1GTjIS1l37dIobKya2fi/GgJBDMddrcbepNr/Qd36GiOxSlBw/i1f 5e6QUDinR56/FDD58Tz/3QBxHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGjj5uS8 ozZykYV1RyPwbSW8qu2yMB8GA1UdIwQYMBaAFMTU+w/wJ3lunaoXt1VR/Qt38Zgv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUI5NC9FM0NDMjVEODgx MUUxMUVDOTIwMjU1NTFDNEY5QUUwMi94TlQ3RF9BbmVXNmRxaGUzVlZIOUMzZnht QzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hOVDdEX0FuZVc2ZHFoZTNWVkg5QzNmeG1DOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUI5NC9FM0NDMjVEODgxMUUxMUVDOTIwMjU1NTFDNEY5QUUwMi94TlQ3RF9BbmVX NmRxaGUzVlZIOUMzZnhtQzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnlK/zki9nxV9GkM0dSZti4apldpcgDgKMxMFJE1GbOLPXgBjxdK6g zevaSsO7AbGoxYHejeSr7+8WHg0Nj9rixS0in2K+y6DV2pzgHioXdYvy7/UnklQY ExqoOa31Z7qlwzglzZlNw00O6UuOKjfFcSuqLwCtuLNh3tYyN/LdUXffRdO2/Cct PSmwhjntZkxxlLNkl3e1bNrODKtBr5X6bWVVvE1SKI7JDBhMAzYRlkUfrE7fK98t JoCHYu/CN4nzJNk6XLYC1RkeTPshyCDTdwNjACa9qc6zPWaBuUFSuVMBSnCf0g3N Vxnv7/m66vmtWgnaq7HW0udoIeIoCcaZ -----END CERTIFICATE-----Generated at Sat Aug 23 16:28:51 2025 by rpki-client